Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/407A24884C3C11F0A124A87BC4F9AE02.roa
File:                     407A24884C3C11F0A124A87BC4F9AE02.roa (raw, json)
Hash identifier:          fQ+HAOnt+jBM85xNFfzunsPIG/ifJvF7r2Mfr+I3v2I=
Subject key identifier:   A0:1F:55:83:71:53:B0:48:CB:C3:47:61:50:80:B5:EF:3A:77:19:FB
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       31E9
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/407A24884C3C11F0A124A87BC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:26:30 +0000
ROA not before:           Mon 06 Jul 2026 16:26:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     153973
IP address blocks:        165.101.10.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12777 (0x31e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:26:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd735-361a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:37:c3:51:41:5e:79:71:11:63:49:d4:62:8c:
                    c9:91:f8:52:4f:df:3f:a1:1b:15:ad:f0:02:99:96:
                    70:d9:c5:75:f0:3c:57:01:0a:d8:5c:6f:05:68:24:
                    22:85:ac:db:22:d7:ee:85:ae:db:e6:ca:01:98:94:
                    ca:af:3a:3c:b4:1b:c8:2e:73:36:da:bd:04:87:b0:
                    fc:19:f1:a1:a2:21:97:00:0c:52:41:ff:21:3d:4a:
                    1b:36:16:c2:80:e2:c6:3e:45:e5:10:d5:08:d3:19:
                    c0:d9:a5:38:61:09:63:5d:b3:f9:8c:96:9d:6b:5b:
                    69:ee:62:26:d1:32:21:96:d8:2e:73:40:0a:8d:64:
                    a2:0f:21:22:82:04:94:39:ec:8b:96:56:d7:83:f1:
                    61:e0:f8:10:37:07:de:f4:8a:16:cf:38:89:02:9e:
                    97:c3:33:13:8a:56:cb:75:64:a0:de:d2:04:23:2b:
                    4b:55:9b:9e:94:c3:52:1b:8a:c2:69:ed:d7:e6:5d:
                    48:a5:2c:93:f1:93:1a:7a:c1:6a:d9:3e:56:2f:00:
                    9d:07:4c:ca:38:b7:b4:69:f9:df:ca:cc:9e:0c:2c:
                    a6:8f:d3:2d:e4:b4:3c:83:ab:b0:d9:32:d7:27:05:
                    4e:94:80:c1:38:8d:91:eb:92:d8:70:79:8d:49:82:
                    14:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1F:55:83:71:53:B0:48:CB:C3:47:61:50:80:B5:EF:3A:77:19:FB
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/407A24884C3C11F0A124A87BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:b1:a3:71:f4:f8:cf:f7:f3:75:a5:1e:c3:7a:f3:7a:a8:25:
         1a:84:10:bf:c3:5a:77:be:77:e5:32:f5:b5:4f:30:0b:38:3e:
         01:11:c8:e4:50:09:af:f5:6a:3e:50:b0:3e:57:c0:14:a2:d9:
         fa:9f:77:9f:1e:25:dd:d9:82:7d:8f:b2:7c:df:b7:9e:22:1e:
         11:c3:21:29:eb:ad:68:b3:90:f3:d2:6e:24:be:1b:26:72:15:
         24:05:00:fe:d5:fc:4b:1d:65:3a:6c:18:b1:66:76:ca:c6:b7:
         c9:50:0d:2f:58:e3:58:c2:9b:f3:34:7a:45:f5:0b:42:3e:e5:
         f6:c2:db:ad:6d:22:a5:4b:dd:ec:bd:55:0c:6f:de:5c:0d:41:
         cf:8b:d1:2a:35:00:be:6c:83:11:be:01:77:ec:a4:83:92:de:
         41:0c:d0:1f:9e:49:ce:ad:f2:b3:53:ca:a6:39:71:6b:09:5c:
         ea:30:db:68:27:05:52:09:97:75:3f:74:5c:e6:8e:b9:85:29:
         cd:de:fa:b5:71:4c:2e:85:63:9f:ef:40:06:e0:8d:d3:a7:77:
         cd:7e:22:0a:ea:02:e4:06:c8:81:d7:40:7b:84:56:0c:70:6b:
         6d:14:7d:5d:ea:a4:cc:ee:4d:80:23:2c:ae:4c:23:17:b1:9c:
         49:ad:78:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:25 2026 by rpki-client